medium5.3
CVE-2019-20403
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an informati…
Impact
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Data Center | from 7.13.0 before 8.5.5 |
| Atlassian | Jira Server | after 7.13.0 before 8.5.5 |